OPNsense · firewall · security
OPNsense: protect your business network
We design and configure OPNsense for offices, server rooms and remote sites: firewall rules, VLANs, VPN, DNS, routing and secure remote access.
Get a preliminary estimate ↗
SETTING UP YOUR SOLUTION
Separate networks and control access
We configure OPNsense, firewall rules, VLAN segments and required VPN connections, then verify routes and permissions before handover.
Explore the implementation process ↗The outcome
You get a controlled network perimeter: internal systems are isolated from the internet, access is documented, and new locations can join through secure tunnels.
Basic setup
- Firewall policies and VLAN network segmentation
- WireGuard or site-to-site VPN between offices and servers
- DNS, DHCP, routing and employee access
- Baseline logging, updates and configuration backups
- Rule documentation and recovery plan
Typical needs
- Protect an office or server network
- Separate accounting, cameras, guest Wi‑Fi and business systems
- Connect several locations securely with VPN
Functional capabilities
What this enables in daily work.
Firewall rules for inbound, outbound and inter-segment traffic.
VLANs and network segmentation for offices, servers, guest Wi‑Fi and equipment.
VPN access for remote staff and connectivity between locations.
Clear handover of rules, access and basic administration procedures.
Pricing
Clear before work begins.
Network audit
We document current architecture and risks
OPNsense configuration
Baseline firewall, VLAN and VPN configuration
Support
Updates, backups and rule changes
Hardware and third-party service licences are not included in the service price.
What we need from you
- Hosting on Niya capacity, an account with the selected provider or an existing server.
- A description of the current network, service or required outcome.
- Separate access with the required permissions for the work.
What is not automatically included
- VPS, hardware, domains and third-party services are paid for separately.
- Non-standard integrations, migrations or extra components are assessed after the task is clarified.
Ongoing support
After launch, an ongoing support model can be agreed for planned updates, checks and changes within an agreed scope of work.
Telegram updates and support: Read Vyvick EngineeringContact Vyvick SupportNIYA / BRIEF
What to clarify before ordering
These details help choose the configuration, estimate the work and avoid unexpected costs.
- Which segments should be separated: office, servers, guests or equipment?
- Which routers, internet connections and VPNs are already in use?
- When can changes and configuration recovery be tested?
What we agree before starting
- Users, devices and locations; for file storage, the required data capacity.
- Server resources, backup location and a restore check.
- Configuration scope, migration and any additional components.
- One-time work and separate monthly costs. Ongoing support is agreed separately.
Published prices are an indication for the described work. Resource limits and timing are confirmed in the proposal after we clarify your task; capacity is not unlimited.
Tell us about your task
Leave your contact and a short description. We agree the scope, estimate, schedule and acceptance checks before work begins.
[email protected]